METHOD OF STOPPING INTERNET VIRUSES 

BACKGROUND OF THE INVENTION 

A. Field of the invention 

This invention relates to methods and systems for blocking computer viruses in 
computer Email and Email attachments. This method could be used on any transfer of data 
between any two devices. 

B. Description of the prior art 

One of the most serious threats to Internet Commerce is the threat of a coordinated attack 
on the Internet system by a foreign government or terrorist which could launch hundreds of 
viruses at the same time, causing a complete shutdown of the Internet system. In addition there 
are computer hackers who are constantly devising viruses which are capable of blocking private 
and commercial systems, causing millions of dollars in damage to commerce and an enormous 
cost of repairing the damage for the average user. 

A number of systems have been designed to screen and block viruses, however, they only 
work after the virus has been identified and an identifier has been installed on user computers. 
When new viruses or worms are introduced, the current systems do not stop them. In addition, 
since there are so many viruses to check for , the process takes a lot of computer time and must 
be updated regularly. 

One such virus is the "I Love You" letter which was felt worldwide and caused 8.7 billion 
dollars according to research from Computer Economics. An article in the July 200 Popular 
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Science Magazine (page 48) the "Love Bug" is relatively lightweight, from a technical 
perspective. More recently, two worms were released that caused major commercial disruption . 
Over one million computers were affected, it stopped some railroad and complicated registration 
at colleges. 

The proliferation of computers in the workforce today has significantly increased the 
importance of electronic data storage. The loss of which can lead to unacceptable disruptions of 
operations. 

In response, data recovery methods have been implemented such as the method disclosed 
in U.S. Patent No. 6,363,487. A system is disclosed for a protected data storage medium. The 
protected data storage medium includes a storage medium that includes a protected area. In 
addition, the protected data storage includes a controller that is capable of controlling access to the 
storage medium. Other related systems are disclosed in U. S. Patent Nos. 5,889,943; 5,964,889; 
6,338,141; and 6,591,362. 

SUMMARY OF THE INVENTION 

The present invention provides a method for stopping Internet viruses from spreading via 
Email and Email attachments which can damaging computer systems by preventing Email 
distributed viruses from activating in a protected computer. The method comprises of saving the 
first 64 bits of data in an Email or Email attachment in a created header and replacing it with a 
binary zero which is a halt command to a program. 
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BRIEF DESCRIPTION OF THE DRAWINGS 

Fig. 1 is a flow chart of the routine to be inserted into the program which receives Email 
and the routine that receives Email attachments. 

Fig. 2 is a flow chart of the routine to be inserted into the program that opens Email and 
Email attachments. 

Fig. 3 is a flow chart of the routine to be inserted into the program that forwards Email 
and the program that forwards Email attachments. 

BEST MODE OF CARRYING OUT THE INVENTION 

As shown in the accompanying figures, the routine to be inserted in the program which 
receives Email and the program that receives Email attachments is designated by the numeral 10, 
the routine to be inserted in the program that opens Email and Email attachments is designated 
by the numeral 1 1, and the routine to be inserted in the program that forwards Email and Email 
attachments is designated by the numeral 12. 

The first step 13 of the method of stopping Internet viruses via Email and Email 
attachments is to insert routine 10 into the user's computer program which receives Email and 
Email attachments from the server. Then check the first packet flagl4 to see if this is the first 
packet for this Email or Email attachment. (Note: the flag would be initialized to say first packet 
has not come in.)(Note: Email and Email attachments are sent in packets or small groups of data 
and then assembled at the destination. Since this method is only concerned with the first 64 bits of 
data, (Note: not to include the TCP/IP header.) Only the first packet of data need be addressed.) If 
this is the first packet 14, set the first packet flag 15 to say first packet has come in. Move the first 
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64 bits of data to a reserved place in a created header 16 for this Email or Email attachment. Put a 
binary zero into the first 64 bits of data 17 for this packet. (Note: Binary zero is a halt command to 
a program.) Continue the normal receiving program 18. If the flag was set to say the first packet 
had come in, continue the normal receiving program 1 8. 

The second step 19 of stopping Internet viruses via Email and Email attachments is to 
insert the routine 1 1 in the program that opens Email and Email attachments. The next step is to 
create a window 20 that ask the user if they would like to replace the first 64 bits of data 21 in the 
Email or Email attachment.(Note: One can readily see a text or a picture Email or attachment and 
have no problem identifying those as valid data. The window should display the length of the data 
to assist the user in determining the validity of the data. If one can not identify the data, they 
should not replace the 64 bits of data until they verify the contents. If viruses are known to exist , 
the media could publicize the length to alert computer users.) If the user typed a "Y" indicating 
they want the bits replaced, move the 64 bits from the header 22 into the first 64 bits of data. Exit 
the routine at 23. If the user does not want to replace the bits, continue to the exit 23. 

The third step 24 of stopping Internet viruses via Email or Email attachments is to insert 
the routine 12 into the user's computer program that forwards Email and Email attachments. 
Check the first packet out flag 25 to see if this is the first packet out. (Note: the first packet out 
flag is initialized to say first packet out. ) If this is the first packet out, set the first packet out flag 
to say not first packet. Check to see if the first 64 bits have been replaced 27. If the data has not 
been replaced, replace the first 64 bits of data with stored data 28. Continue with the forwarding 
routine 29. If the data has been replaced, continue with the forwarding program 29. If this is not 
the first packet out, continue with the forwarding program 29. 
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This method of stopping Internet viruses via Email or Email attachments presents options 
the user must make and presents information to aid in that decision. 

Although the invention has been described by way of example and with reference to 
possible embodiments, it is to be appreciated that improvements and/or modifications may be 
made to these embodiments without departing from the scope of the invention. 
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